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(57) Abstract 

A data packet switching and server load balancing device is provided by a general-purpose multiprocessor computer system. The 
general-purpose multiprocessor computer system comprises a plurality of symmetrical processors coupled together by a common 
data bus, a main memory shared by the processors, and a plurality of network interfaces each adapted to be coupled to respective 
external networks for receiving and sending data packets via a particular communication protocol, such as Transmission Control 
Protocol/Internet Protocol (TCP/IP). A first one of the processors is adapted to serve as a control processor and remaining ones 
of the processors are adapted to serve as data packet switching processors. The data packet switching processors are each coupled 
to at least one of the plurality of network interfaces. The control processor receives raw load status data from the external 
networks and generates load distribution configuration data therefrom. The load distribution configuration data is stored in the 
main memory for access by the data packet switching processors. The switching processors route received ones of the data packets 
to a selected one of the external networks in accordance with information included in a header portion of the data packets and 
the load distribution configuration data. The switching processors perform periodic polling of corresponding ones of the network 
interfaces to detect a received one of the data packets therein. In addition, the switching processors re-write the routing 
information included in the header portion of the data packets to reflect the selected one of the external networks. 

(57) Abrege 

^invention concerne un disposrtif de commutation de paquets de donnees et d'equilibrage des charges, compris dans un systeme 
informatique multiprocesseurs a usages multiples. Ce systeme comporte une pluralite de processeurs symetriques couples les uns 
aux autres par un bus de donnees commun, une memoire principale partagee par les processeurs, ainsi qu'une pluralite d'interfaces 
reseau adaptees de fagon a etre coupiees a des reseaux exterieurs respectifs pour echanger des paquets de donnees via un 
protocole de communication particulier, tel que le protocole TCP/IP. Un premier processeur est adapte de fagon a servir de 
processeur de commande, les autres sont adaptes de fagon a servir de processeurs de commutation de paquets. Chaque 
processeur de commutation de paquets est couple a au moins une interface reseau. Le processeur de commande regoit des 
donnees a statut de charge brut depuis les reseaux exterieurs, et genere a partir de ces donnees, des donnees de configuration de 
distribution des charges. Les donnees de configuration de distribution des charges sont stockees dans la memoire principale de 
fagon que les processeurs de commutation de paquets puissent y avoir acces. Ces processeurs acheminent les paquets de 
donnees regus a un reseau exterieur choisi conformement aux informations contenues dans I'en-tete des paquets de donnees et des 
donnees de configuration de distribution des charges. Ces processeurs de commutation effectuent des appels selectifs reguliers 
des interfaces reseau correspondantes, afin de detecter parmi ces dernieres un paquet de donnees regu. Lesdits processeurs 
reecrivent en outre I'information d'acheminement contenue dans I'en-tete des paquets de donnees pour qu'elle corresponde au 
reseau exterieur choisi. 
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(57) Abstract 

A data packet switching 
and server load balancing device 
is provided by a general-purpose 
multiprocessor computer system. 
The general-purpose multiprocessor 
computer system comprises a plurality 
of symmetrical processors coupled 
together by a common data bus, a main 
memory shared by the processors, and 
a plurality of network interfaces each 
adapted to be coupled to respective 
external networks for receiving and 
sending data packets via a particular 
communication protocol, such as 
Transmission Control Protocol/ Internet 
Protocol (TCP/IP). A first one of the 
processors is adapted to serve as a 
control processor and remaining ones 
of the processors are adapted to serve 
as data packet switching processors. 
The data packet switching processors 
are each coupled to at least one of the 
plurality of network interfaces. The 
control processor receives raw load 
status data from the external networks 

and generates load distribution configuration data therefrom. The load distribution configuration data is stored in the main memory for 
access by the data packet switching processors. The switching processors route received ones of the data packets to a selected one of the 
external networks in accordance with information included in a header portion of the data packets and the load distribution configuration 
data. The switching processors perform periodic polling of corresponding ones of the network interfaces to detect a received one of the 
data packets therein. In addition, the switching processors re-write the routing information included in the header portion of the data 
packets to reflect the selected one of the external networks. 
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COMPUTER DATA PACKET SWITCHING AND LOAD BALANCING 
SYSTEM USING A GENERAL-PURPOSE MULTIPROCESSOR 
ARCHITECTURE 

5 

BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

The present invention relates generally to computer data 
communication networks, and more particularly, to a general-purpose 
10 multiprocessor computer architecture adapted to transfer data packets 
between computer networks and to perform load balancing to ensure efficient 
utilization of the computer networks. 

2. Description of Related Art 

Computer networks are widely used as a way to communicate 
15 messages between computers. The Internet is made up of more than 
100,000 interconnected computer networks spread across over 1 00 countries, 
including commercial, academic and government networks. Originally 
developed for the military, the Internet has become widely used for academic 
and commercial research. Today, the Internet has become commercialized 
20 into a worldwide information highway, providing information on every subject 
known to humankind. Similarly, businesses and other entities have adopted 
the Internet paradigm as a model for their internal networks, or so-called 
"intranets." 

Messages transferred between computers within a network are 
25 typically broken up into plural data packets. Packet switching systems are 
used to route the data packets to their required destination and enable the 
efficient handling of messages of different lengths and priorities. Since each 
data packet includes a destination address, all packets making up a single 
message do not have to travel the same path. Instead, the data packets can 
30 be dynamically routed over the interconnected networks as circuits become 
available or unavailable. The destination computer receives the data packets 
and reassembles them back into their proper sequence to reconstruct the 
transmitted message. 
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Internet computer networks generally use the TCP/IP communications 
protocol, which is an acronym for Transmission Control Protocol/Internet 
Protocol. The TCP portion of the protocol provides the transport function by 
breaking a message into smaller packets, reassembling the packets at the 
5 other end of the communication network, and re-sending any packets that get 
lost along the way. The IP portion of the protocol provides the routing function 
by giving the data packets an address for the destination network and client at 
the destination network. Each data packet communicated using the TCP/IP 
protocol includes a header portion that contains the TCP and IP information. 

10 Another communication protocol used in communication between Internet 
computer networks is UDP/IP, in which UDP is an acronym for User 
Datagram Protocol. UDP is used in place of TCP in conditions when a 
reliable delivery is not required. For example, UDP/IP is often used for real- 
time audio and video traffic where lost data packets are simply ignored, 

15 because there is no time to retransmit. Since the computer networks 
connected to the Internet may use other communication protocols besides 
TCP/IP or UDP/IP, gateways are used to convert data packets from these 
protocols into the other protocols. 

At a destination network, one or more routers may be utilized to receive 

20 incoming data packets and route the packets to other internal networks such 
as local area networks (LAN). The internal networks may further include 
servers that supply information to one or more clients. The servers are 
generally high-speed microcomputers, minicomputers or even mainframes. In 
some cases, the clients are internal to the network (i.e., at the back-end), and 

25 the router acts as a conduit for communication of data packets between the 
clients and the outside world. The back-end servers may provide various 
application functions for the clients, such as a database server that maintains 
the databases and processes requests from clients to extract data from or 
update the databases. In other cases, the clients are external to the network 

30 (i.e., at the front-end), and the router acts as a conduit for communication of 
data packets between the clients and the back-end servers. For example, an 
Internet application server at the back-end may host Web applications within 
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the network that are accessed by clients outside the network. In still other 
cases, the clients are both internal and external to the network. The routers 
perform the functions of switching data packets between the internal and 
external networks, and balancing the load placed upon the back-end servers 
5 of the internal network by distributing message packets between the back-end 
servers in the most efficient and expeditious manner. 

In view of the high volume of message traffic that they process and the 
relatively limited kinds of tasks that they perform, routers typically comprise 
dedicated switching processors having an architecture optimized to provide 
10 these functions. A drawback of such dedicated switching processors is that 
2 0 they can be very expensive due in part because they are manufactured in 

relatively low volumes as compared with other general-purpose computer 
systems. Moreover, the software that provides the message routing and load 
balancing functions must be written specifically for the dedicated switching 
25 15 processors, which further increases the cost of purchasing, operating and 

maintaining such systems. An additional drawback of dedicated switching 
processors is that most modifications to their functionality require a hardware 
change, which is typically more expensive and difficult than a software 
30 change. 

20 It would therefore be very desirable to provide the message routing and 

load balancing functions of a network router within a general-purpose 
symmetrical multiprocessor (SMP) computer system. Such general-purpose 

35 

multiprocessor computer systems are less expensive than conventional 
systems due to their larger volume production, and changes to their 
25 functionality can be readily accomplished by modifying their software rather 
than their hardware. 

40 

SUMMARY OF THE INVENTION 
In accordance with the teachings of the present invention, a data 
45 30 packet switching and server load balancing device is provided by a general- 

purpose multiprocessor computer system. The general-purpose 
multiprocessor computer system comprises a plurality of symmetrical 
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processors coupled together by a common data bus, a main memory shared 
by the processors, and a plurality of network interfaces each adapted to be 
coupled to respective external networks for receiving and sending data 
packets via a particular communication protocol, such as Transmission 
5 Control Protocol/Internet Protocol (TCP/IP) or User Datagram Protocol (UDP). 

More particularly, a first one of the processors is adapted to serve as a 
control processor and remaining ones of the processors are adapted to serve 
as data packet switching processors. The data packet switching processors 
are each coupled to at least one of the plurality of network interfaces. The 
10 control processor receives raw load status data from agents running on the 
20 back-end application servers and generates load distribution configuration 

data therefrom. The load distribution configuration data is stored in the main 
memory for access by the data packet switching processors. The switching 
processors route received ones of the data packets to a selected one of the 
25 15 external networks In accordance with information included in a header portion 

of the data packets and the load distribution configuration data. The switching 
processors perform periodic polling of corresponding ones of the network 
interfaces to detect a received one of the data packets therein. In addition, 
the switching processors re-write the routing information included in the 
20 header portion of the data packets to reflect the selected one of the external 
networks. 

A more complete understanding of the computer data packet switching 
and load balancing system using a general purpose multiprocessor 
architecture will be afforded to those skilled in the art, as well as a realization 
25 of additional advantages and objects thereof, by a consideration of the 
40 following detailed description of the preferred embodiment. Reference will be 

made to the appended sheets of drawings, which will first be described briefly. 



RRIEF DESCRIPTION OF THE DRAWINGS 

45 

30 Fig. 1 is a block diagram of a network configuration having a load 

balancing and packet switching device in accordance with the present 
invention; 
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Fig. 2 is a block diagram of a general-purpose symmetrical 
multiprocessor computer system adapted to provide the load balancing a 
packet switching device; 

Fig. 3 is a block diagram of the general-purpose multiprocessor 
computer system configured to provide a switching processor to perform 
network data packet switching and a control processor to perform network 
load balancing; 

Fig. 4 is a block diagram depicting communication of information 
between the control processor and one of the switching processors; 

Fig. 5 is a flow chart illustrating operation of the packet engine module 
of the switching processor; 

Fig. 6 is a flow chart illustrating operation of the packet filter module of 
the switching processor; 

Fig. 7 is a block diagram illustrating a first embodiment of the invention 
having a pseudo-interface between the control processor and switching 
processors through the internal switch; 

Fig. 8 is a block diagram illustrating a second embodiment of the 
invention having a pseudo-interface between the control processor and 
switching processors through a driver operating on the control processor; 

Fig. 9 is a block diagram illustrating the portions of a data packet; 

Fig. 10 is a block diagram illustrating a third embodiment of the 
invention having a user-level network interface for applications operating on 
the switching processor; 

Fig. 1 1 is a flow chart illustrating a process of Initializing the switching 
processor for user-level access to the network interfaces; 

Fig. 12 is a flow chart illustrating a process of sending data packets to 
a network interface at the user level; and 

Fig. 13 is a flow chart illustrating a process of receiving data packets 
from a network interface at the user level. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 
The present Invention satisfies the need for a general-purpose 
multiprocessor computer system adapted to provide message routing and 
load balancing functions for a computer network. In the detailed description 
5 that follows, like element numerals are used to describe like elements 
depicted in one or more of the figures. 

Referring first to Fig. 1, an exemplary network configuration using a 
load balancing and packet switching system 10 of the present invention is 
illustrated. The network elements illustrated to the left of the load balancing 
10 and packet switching system 10 in Fig. 1 are referred to as the "back-end 
20 server" side of the network, and the network elements illustrated to the right of 

the load balancing and packet switching system 10 are referred to as the 
"client" side of the network. On the client side of the network, the load 
balancing and packet switching system 10 is coupled through two separate 
25 15 network channels to an external network switch 13. The external switch 13 is 

coupled to client stations 7i-7 2 , permitting communication between the client 
stations and the back-end server side of the network. The external switch 13 
is further connected to the Internet (or an intranet) 8 servicing client stations 
30 9i-9 2 through a router 6. On the back-end server side of the network, the load 

20 balancing and packet switching system 10 is coupled through two separate 
network channels to an internal network switch 1 1 . The internal switch 1 1 is 
further coupled to back-end servers 5r5 3 . Thus, data packets originated at 
the client side of the network, such as from client stations 9i-9 2 or 7i-7 2 , and 
directed to the back-end side of the network pass through the external switch 
25 13 to the load balancing and packet switching system 10, which determines 
the routing of the data packets to the back-end servers 5i-5 2 through the 
internal switch 1 1 . Conversely, data packets originated at the back-end side 
of the network and directed to the client side of the network follow the same 
path in reverse. 

45 30 As known in the art, a network switch is a device that cross connects 

network nodes or LAN segments and allows full bandwidth to pass between 
connected nodes. Alternatively, the internal or external switches 11,13 could 
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be provided by a network hub, which is a device that connects nodes by 
sharing the bandwidth between the connected nodes. Network switches are 
advantageous over network hubs in view of their greater capacity and speed. 
As also known in the art, a router is a device that routes data packets 
5 between networks. Routers read the network address in each transmitted 
data packet and make a decision on how to send it based on the most 
expedient route (traffic load, line costs, speed, bad lines, etc.). Alternatively, 
the router 6 may be provided by a network switch or hub. It should be 
appreciated that various alternative network configurations are anticipated, 
10 and moreover, that the numbers of clients, back-end servers and network 
20 channels shown in Fig. 1 are purely for the purpose of illustration and are not 

intended to limit the scope of the invention in any way. 

Referring now to Fig. 2, there is shown a general-purpose symmetrical 
multiprocessor (SMP) computer adapted to provide the load balancing and 
25 15 packet switching system 10 of Fig. 1. The SMP computer includes N 

individual processors 24o-24 N coupled to a common system bus 12. Each one 
of the N processors 24 0 -24 N has an associated cache memory 25 0 -25 N . The 
processors 24 0 -24 N may be provided by 64-bit UltraSPARC microprocessors 
sold by Sun Microsystems, Inc. The SMP computer further includes a main 
20 memory 14 and a memory controller 15 coupled to the common system bus 
12. The main memory 14 contains stored data and instructions accessible by 
each of the processors 24 0 -24 N with the memory controller 15 controlling 
individual accesses to the main memory. As known in the art, the cache 
memory 25o-25 N bridges the main memory 14 and the processors 24 0 -24 N . 
25 The cache memory 25 0 -25 N is faster than the main memory 14 and allows 
40 instructions to be executed and data to be read at higher speed. Instructions 

and data are transferred to the cache memory 25 0 -25 N in blocks using a look- 
ahead algorithm. The more sequential the instructions in the routine being 
accessed, and the more sequential the order of the data being read, the more 
45 30 chance the next desired item will still be in the cache memory 25 0 -25 N , and 

the greater improvement in performance. It is anticipated that the cache 
memory 25o-25 N be comprised of static random access memory (SRAM) 
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chips, while dynamic RAM (DRAM) chips are used for main memory 14. 
Alternatively, the cache memory 25 0 -25 N may be provided directly onto the 
same chips as the corresponding processors 24 0 -24n. 

An input/output (I/O) controller 16 is also coupled to the common 
5 system bus 12, and controls the transfer of data between the processors 24 0 - 
24 N and peripheral devices. In particular, the I/O controller 16 is coupled to a 
disk interface device 18 which controls exchanges of data between the 
processors 24 0 -24 N and one or more disk storage devices. The I/O controller 
16 is also coupled to M network interface devices 17r17 M which each control 
10 exchanges of data between the processors 24 0 -24n and external computer 
20 networks, clients or servers. Each one of the network interface devices 17r 

17 M include a receive queue in which received data packets are temporarily 
held while awaiting processing by the SMP computer, and a transmit queue in 
which transmitted data packets are temporarily held while awaiting 
25 15 communication to a computer network. It should be appreciated that the N 

number of processors 24o-24 N would generally be equal to or less than the M 
number of network interface devices 17r17 M . Each of the M network 
Interface devices 17i-17m may communicate with plural computer networks, 
30 clients or servers, using conventional network protocols such as Ethernet, 

20 Token Ring, Asynchronous Transfer Mode (ATM), etc. 

It should be appreciated that the SMP computer may further include a 
keyboard and monitor (not shown) to permit access by management 
information services (MIS) personnel, such as to perform diagnostics, routine 
maintenance, and administrative level tasks. As will be further described 
25 below, the SMP computer is adapted to provide message routing and load 
balancing functions that would not require any direct user interaction, and the 
keyboard and monitor would therefore serve little use during ordinary 
operation of the computer system. However, certain applications of the load 
balancing and message routing system do include user applications running 
45 30 on the SMP computer, and for such applications it should be appreciated that 

a keyboard and monitor would be necessary. It is anticipated that the SMP 
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computer include a multitasking, multiprocessing operating system, such as 
the Solaris operating system by Sun Microsystems, Inc. 

Referring now to Fig. 3, a block diagram of the general-purpose SMP 
computer configured to provide network data packet switching and load 
balancing functions is illustrated. In the load balancing and packet switching 
system 10, one of the plural processors 24 0 -24 N of Fig. 1 serves as a control 
processor 42, and the remaining processors serve as switching processors 
44 1 and 44 2 . The control processor 42 and switching processors 44, and 44 2 
each have access to a shared memory space 34, such as provided by a 
portion of the main memory 14 of Fig. 1. The control processor 42 handles 
administrative and configuration functions for the load balancing and packet 
switching system 10, and also communicates with agents on the application 
servers to collect system load information. The control processor 42 then 
performs complex calculations on the raw system load information and 
defines an optimum traffic load distribution. The traffic load distribution result 
is then written into the shared memory space for use by the switching 
processors 44! and 44 2 . The switching processors 44 n and 44 2 exclusively 
perform the packet switching tasks, and do not handle any other computing 
tasks. Although two switching processors 44 y and 44 2 are depicted in Fig. 3, 
it should be appreciated that any number of switching processors can be 
advantageously utilized. 

The switching processors 44i and 44 2 are each coupled to plural 
network interfaces 37i-373, such as provided by the network interfaces 17 r 
17 M of Fig. 2. Each respective one of the switching processors 44i and 44 2 
poll corresponding ones of the plural network interfaces 37 r 373 for incoming 
data packets 20 present on their respective receive queues. Particularly, 
switching processor 44i polls the receive queue of network interface 37 1t and 
switching processor 44 2 polls the receive queue of network interfaces 37 2 and 
37 3 . Since each of the switching processors 44i and 44 2 poll different ones of 
the network interfaces 37r37 3l conflicts between the switching processors 
over received data packets is avoided. In contrast, each one of the switching 
processors 44, and 44 2 can supply data packets to the transmit queues of 
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each one of the network interfaces 37 r 37 3t so that data packets can then be 
routed to any computer network coupled to the load balancing and packet 
switching system 10. 

Fig. 4 illustrates in greater detail the communication of information 
5 between the control processor 42 and one of the switching processors 44. 
The control processor 42 further includes several software modules to handle 
discrete control tasks, including a resource manager module 52 and a master 
module 54. The control processor 42 may further include specialized 
application program interfaces (API) that handle communication between 

10 these software modules. The resource manager module 52 receives raw data 
from the back-end application servers indicating their present load status. 
This raw data includes various factors, including the number of clients 
presently being served, the utilization rates of the CPU and memory of the 
application server processor, the average execution time, and the number of 

15 requests per second. The raw load data is then provided to the master 
module 54, which synthesizes the data into a desired load distribution in 
accordance with a predetermined distribution algorithm. For example, the 
distribution algorithm may favor distribution of incoming packets so that all 
servers have an even load, or alternatively, may favor distribution of incoming 

20 packets to certain servers having unique applications or processing capability. 
Such distribution algorithms are well known in the art. It is also anticipated 
that the resource manager module 52 can be provided as a separate device 
entirely external to the control processor 42. 

The shared memory 34 further includes a routing table 62, a 

25 configuration table 64, and a connection table 66. The routing table 62 is a 
database that contains the current network topology, and is accessed by the 
switching processor 44 in determining routing information for the received 
data packets. Specifically, the routing table 62 defines the addresses and 
interconnection pathways between the load balancing and packet switching 

30 device 10 and the networks connected thereto. A routing daemon 58 within 
the control processor 42 is a program that executes in the background to 
retrieve the information stored in the routing table 62 and maintains the status 
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of the routing table 62 as changes are made to the configuration. As 
generally known in the art, the routing daemon 58 functions like an extension 
to the operating system, and does not otherwise interact with the other 
modules of the control processor 42 or the switching processor 44 discussed 
5 above. 

The load distribution data synthesized by the master module 54 is 
stored in the configuration table 64. The configuration table includes two 
redundant memory buffers, identified in Fig. 4 as A and B. At any given time, 
one of the two memory buffers is the active buffer and the other is the back-up 
10 buffer. A memory pointer within the shared memory 34 defines which one of 
20 the two buffers is currently the active buffer. The switching processor 44 

obtains the current load distribution data from the active buffer. The master 
module 54 of the control processor 42 periodically provides updated load 
distribution data to the shared memory 34 that is written to the back-up buffer. 
25 15 Thereafter, the memory pointer switches from the active to the back-up buffer 

so that the updated load distribution data is accessible to the switching 
processor 44. This double buffering technique speeds up operation of the 
load balancing and packet switching system 10 by enabling load data 
processing to occur concurrently with packet switching, and prevents potential 
20 conflicts between the switching processor 44 and the control processor 42 
that both need access to the same memory space. 

The connection table 66 maintains a record of the TCP and UDP 
connections routed by each of the switching processors 44. As discussed 
above, the data packets received by the switching processors 44 each contain 
25 transport data in the header (i.e., TCP or UDP data) that defines how the data 
packets should be reassembled with other data packets to reconstruct 
complete messages, or connections. As shown in Fig. 9, the data packets 20 
generally have an IP address which is provided in an IP header 20c to define 
the destination device as known to the external computer networks. This 
45 30 external IP address may actually be different than the internal IP address of 

the back-end application server selected by the load balancing and packet 
switching system 10. Accordingly, the entries of the connection table 66 map 
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the external IP address to the internal IP address. Following the IP header 
20c, a TCP (or UDP) header 20b contains the transport data. The data 
portion 20a of the data packet 20 is provided after each of the foregoing 
headers. Returning now to Fig. 4, a new entry is added to the connection 
5 table 66 after a first data packet of a new connection is received. The 
transport data for each of the received data packets is provided to the 
connection table 66 by the switching processor 44. 

Once the IP address is translated by the connection table 66, the 
switching processor 44 determines a Media Access Control (MAC) address 
10 using an address resolution protocol (ARP). According to the ARP, a remote 
20 network node desiring to transmit a data packet to another node transmits an 

ARP broadcast packet that is received by every node connected to the 
network. The receiving node responds with an ARP response packet that 
contains the MAC address of the receiving node. Thereafter, the remote 
25 15 network node uses the MAC address in a MAC header 20d of subsequent 

data packets. The remote network node then saves the MAC address in the 
ARP cache memory so that it won't need to send another ARP broadcast 
packet again. 

30 Like the control processor, the switching processor 44 also includes 

20 software modules to handle discrete tasks, including a packet engine module 
72 and a packet filter module 74. The packet engine module 72 
communicates with the network interface 37 to periodically poll for the 
presence of data packets in the receive queue, and delivers packets to the 
transmit queue to be sent to the external networks. The packet filter module 
25 74 reads the IP and TCP/UDP data in the packet header to determine how to 
route the data packet. The packet filter module 74 accesses the connection 
table 66 in the shared memory 34 to determine whether a received packet is 
part of an existing connection or a new connection. Then, the packet filter 
module 74 accesses the configuration table 64 to determine the proper 
45 30 routing of the received data packet based on current load conditions and other 

factors. The switching processor 44 may further include specialized APIs that 
handle communication between these software modules. 
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The flow chart of Fig. 5 illustrates the software process performed by 
the packet engine module 72 of Fig. 4. The software process operates in a 
tight loop so as to minimize the latency of data packets waiting in the network 
interface receive queue. The process is initialized at step 100, during which 
5 the switching processor 44 performs certain start-up tasks, including checking 
the routing table 62 in the shared memory 34. It is anticipated that the load 
balancing and packet switching device 10 remain continuously in an 
operational state, and so this initialization step may only be executed rarely. 
A first processing loop begins with step 1 02, In which the packet engine 
10 module 72 polls the network interface 37 receive queue. At step 104, the 
20 packet engine module 72 determines whether there are any data packets 

available at the receive queue. If no data packets are available, the packet 
engine module 72 changes to the next network interface 37 at step 106. As 
discussed above, a single switching processor 44 may be responsible for 
25 15 receiving incoming data packets from plural ones of the network interfaces. It 

should be appreciated, however, that if the switching processor 44 only has 
responsibility for one network interface 37, then this step 106 may be 
bypassed. After step 106, the packet engine module 72 returns to step 102. 
30 This first processing loop will repeat indefinitely until a received data packet is 

20 detected at step 104. If a data packet is available in the network interface 
receive queue, a second processing loop begins at step 108 at which the 
packet engine module 72 retrieves the data packet. Then, at step 110, the 
retrieved data packet is passed to the packet filter module 74 for routing 
(described below). Thereafter, at step 112, the packet engine module 72 
25 determines whether additional packets are present at the network interface 
rece j ve queue. If additional packets are present, the packet engine module 
72 returns to step 108 and the second processing loop is repeated. If no 
additional packets are present, the packet engine module 72 returns to step 
1 06 and the next network interface is polled. 
45 30 The flow chart of Fig. 6 illustrates the software process performed by 

the packet filter module 74 of Fig. 4. The process is initialized at step 200, 
during which the switching processor 44 performs certain start-up tasks as in 
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step 100 discussed above. At step 202, the packet filter module 74 begins 
processing of a data packet retrieved by the packet engine module 72 as 
discussed above. The packet filter module 74 reads the TCP/IP or UDP data 
from the header of the data packet in step 204. The TCP/IP or UDP data will 
5 determine the subsequent processing and routing of the data packet. At step 
206, the packet filter module 74 determines from the TCP/IP or UDP data 
whether the data packet is a valid service entry. In other words, the packet 
filter module 74 verifies that the data packet was properly routed to the load 
balancing and packet switching device 10, or whether it was routed improperly 
10 and received by the network interface in error. If the data packet is not a 
20 valid service entry, at step 208, the packet filter module 74 sends a TCP reset 

packet back to the originator of a TCP connection via the packet engine 
module 72 and the network interfaces, or simply discards the data packet of a 
UDP connection. 

25 1 5 Assuming that the data packet is a valid service entry, the packet filter 

module 74 determines at step 210 whether the data packet is a new 
connection with a client The packet filter module 74 checks the transport 
data in the data packet header against the entries in the connection table 66 
in the shared memory 34 to determine whether previous data packets have 
20 been received from the same client previously. If it is a new connection, then 
the packet filter module 74 checks the configuration table 64 for the current 
load conditions to determine the routing of data packet. As discussed above, 
the packet filter module 74 may elect to send the data packet to the 
application server having the lightest current load. Alternatively, the packet 
25 filter module 74 may send the data packet to a certain one of the application 
4Q servers based on particular aspects of the data packet, e.g., the data packet 

is part of a connection requiring processing capability unique to one of the 
application servers, or the data packet specifically requests action by a 
particular application server. 
45 30 Once the packet filter module 74 determines which application server 

should receive the data packet, the packet filter module at step 216 re-writes 
the MAC address and optionally re-writes the IP address and TCP/UDP port 
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number in the header of the data packet to reflect the address of the selected 
application server. Then, at step 218, a new entry is made in the connection 
table 66 to reflect the new connection. The packet filter module 74 then 
returns the modified data packet back to the packet engine module 72 at step 
5 224 for forwarding to the appropriate network interface 37. The packet filter 
module 74 then returns to step 202 to process the next available data packet. 

If it was determined at step 210 that the received data packet was not a 
new connection with the client, the packet filter module 74 determines at step 
21 2 whether a corresponding entry in the connection table 66 exists, if there 
10 is no corresponding entry, a reset packet is sent for TCP connections or the 
20 packet is discarded for UDP connections at step 208. Conversely, if the 

connection table 66 has a corresponding entry for the data packet, then, at 
step 220, the packet filter module 74 re-writes the MAC address and 
optionally re-writes the IP address and TCP/UDP port number to reflect the 
25 15 application server and application that is already servicing the connection. 

The packet filter module 74 then returns the modified data packet back to the 
packet engine module 72 at step 224 for forwarding to the appropriate 
network interface 37. The packet filter module 74 then returns to step 202 to 
process the next available data packet. 
20 Conventional dedicated switching processors include a control module 

and a switching module that are viewed by the external networks as a single 
network entity. The control module communicates with the switching module 
through special internal interfaces that add overhead to both the control 
module and the switching modules, and is thus undesirable. An advantage of 
25 the load balancing and packet switching system 10 of the present invention is 
that the control processor 42 and the switching processors 44i-44 2 may be 
viewed as entirely separate logical networking end points even though they 
both reside within a single physical device. Therefore, external clients may 
communicate with applications running on the control processor 42 by 
45 30 sending data packets through the switching processors 44i-44 2 , which, in 

turn, route the data packets to the control processor. The control processor 
42 reverses the order to send data packets back to the external clients. 
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A first alternative embodiment of the invention is provided in Fig. 7, 
which illustrates a block diagram of a pseudo-interface between the control 
processor 42 and the switching processors 44i-44 2 . As discussed above with 
respect to Fig. 1, the load balancing and packet switching device 10 
5 communicates on the client side through an external switch 13 and on the 
back-end server side through an internal switch 1 1 . More particularly, the 
15 switching processor 44i communicates with the external switch 1 3 through the 

network interface 37 1t the switching processor 44 2 communicates with the 
external switch 13 through the network interface 37 2 . Similarly, the switching 
10 processor 44i communicates with the internal switch 11 through the network 
20 interface 37 3 , and the switching processor 44 2 communicates with the internal 

switch 1 1 through the network interface 37 4 . The control processor 42 also 
communicates with the internal switch 1 1 through the network interface 37 0 . 
A virtual IP address is assigned to the network interface 37 0 . When 
25 15 external devices on the client side of the network wish to communicate with 

the control processor 42, a data packet is transmitted through the external 
switch 13 to one of the switching processors 44 r 44 2 , with the IP header 20c 
of the data packet listing the virtual IP address as the destination. The 
switching processor 44 then processes the incoming data packet in the 
20 manner described above with respect to Figs. 5 and 6. Specifically, the 
packet filter module 74 of the switching processor re-writes the IP header 20c 
of the data packet to reflect the real IP address of the network interface 37 0 . 
The packet engine module 72 then routes the modified data packet to the 
internal switch 1 1 through a corresponding one of the network interfaces 37. 
25 The internal switch 11 then sends the modified data packet to the network 
40 interface 37 0 which then delivers the data packet to the control processor 42. 

The process is reversed for responses sent by the control processor 42 back 
to the external device that originated the connection. The control processor 
42 sends a data packet via the network interface 37 0 having the real IP 
45 30 address through the internal switch 1 1 to one of the switching processors 44. 

The switching processor 44 re-writes the IP address to the virtual IP address 
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known to the external device. The modified data packet is then sent out by 
the switching processor 44 through the external switch 13. 

A second alternative embodiment of the invention is provided in Fig. 8, 
which illustrates a block diagram of a pseudo-interface between the control 
5 processor 42 and a switching processor 44. The control processor 42 actually 
operates at two levels in a time-shared manner, referred to as a user level 
and an operating system level. The user level comprises the systems 
accessible to the user, and may include one or more user application 
programs 51 executing thereon, such as an e-mail program, a server 
10 application, and/or an Internet browser. The resource manager 52 and 
20 master module 54 described above with respect to Fig. 4 also execute in the 

user level. The operating system level, also known as the kernel, provides 
the basic services for the control processor 42 as well as the switching 
processor 44, such as activating the hardware directly or interfacing to 
25 15 another software layer that drives the hardware. 

As shown in Fig. 8 t the operating system 48 further includes a protocol 
module 55, a pseudo-network driver 57, and a network driver 59. The 
protocol module 55 serves as a data interface for the user application 
programs 51. The protocol module 55 converts received data packets that 
20 are directed to one of the user application programs 51 from the TCP/IP or 
UDP/IP protocols into a format usable by the user application programs. 
Specifically, the protocol module 55 strips off the MAC header 20d, IP header 
20c, and TCP header 20b, leaving the data portion 20a of the data packet 20 
(see Fig. 9). The data portion 20a is then provided to the user application 
25 programs 51. Conversely, the protocol module 55 formats data sent out from 
the user application programs 51 into data packets in accordance with the 
TCP/IP or UDP/IP protocols, by adding the MAC header 20d, IP header 20c, 
and TCP (or UDP) header 20b. 

The network drivers 59 provide an interface between the hardware 
45 30 network interfaces 37 and the software switching processor 44. As illustrated 

in Fig. 8, the control processor 42 does not have a direct connection to the 
network drivers 59. Instead, the pseudo-network driver 57 is configured to 
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appear to the user application programs 51 as a hardware network interface. 
The pseudo-network driver 57 may be provided by a STREAMS mechanism, 
which is a feature of a UNIX-based system that provides a standard way of 
dynamically building and passing messages up and down a message stack. 
5 Ordinarily, messages from a user application are passed "downstream" to the 
network driver at the end of the stack, and messages from the network driver 
are passed "upstream" to the user application. In the present invention, the 
pseudo-network driver 57 provides a message stack that is accessed through 
the use of system calls issued by the user application programs 51 to 
10 communicate with remote devices through the pseudo-network driver 57. As 
will be further described below, a data packet storage area 68 within the 
shared memory 34 appears to the user application programs 51 as such a 
remote device. 

The interface daemon 53 is a program that executes in the background 

1 5 in the user level of the control processor 42 to communicate with the switching 
processor 44 and the pseudo-network driver 57 to initiate transfers of data 
packets therebetween. As described above with respect to Figs. 5 and 6, the 
switching processors 44 receive incoming data packets from remote devices 
through the network interfaces 37. At step 204 of Fig. 6, the packet filter 

20 module 74 reads the MAC address and IP information from the header of a 
received data packet in order to determine routing of the data packet. If the 
packet switching processor 44 determines at step 204 that the intended 
destination for the data packet is one of the user applications 51 running on 
the control processor 42, the data packet is written into the data packet 

25 storage location 68 of the shared memory 34. The switching processor 44 
then signals the interface daemon 53 of the availability of the data packet. 
The interface daemon 53 moves the received data packet to the pseudo- 
network driver 57. The received data packet is then processed through the 
protocol module 55 as if it were an incoming data packet received through an 

30 actual network interface. 

To send data packets that originate in one of the user applications 51 
to a remote device, the foregoing process is reversed. More particularly, data 
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packets from the user applications 51 are passed to the pseudo-network 
driver 57, and the interface daemon 53 monitors the pseudo-network driver for 
data packets. Once a data packet arrives at the pseudo-network driver from 
the user application 51, the interface daemon 53 reads the data packet and 
5 places it in the data packet storage location 68 of the shared memory 34. 
Then, the interface daemon 53 signals the switching processor 44 of the 
availability of the data packet in the data packet storage location 68. The 
switching processor 44 then retrieves the data packet from the shared 
memory 34, and routes the data packet to one of the network interfaces 37 in 
10 the same manner as described above. As a result, remote devices can 
20 * communicate with user applications 51 running on the control processor 42 

even though the control processor does not have a direct connection to a 
network interface. The user applications 51 executing on the control 
processor 42 think they are communicating directly with actual network 
25 15 interfaces. 

As discussed above, user applications ordinarily operate at the user 
level, and data input and output is handled at the operating system level. The 
operating system communicates with the network devices and issues 
interrupts to the network applications at the user level to indicate the receipt of 
20 data. These conventional systems are inefficient since processing of the 
network applications is stopped each time an interrupt is issued, and the 
involvement of the operating system further reduces the efficiency of the user 
applications. It would therefore be desirable to give the network applications 
direct access to the network interfaces and to run the network applications on 
25 a dedicated processor which is not interrupted. Certain network applications 
such as Internet telephony or fax applications would particularly benefit from 
such direct network access. 

A third embodiment of the invention is provided at Fig. 10, which 
illustrates a block diagram of a user-level network interface for applications 
45 30 running on the switching processor 44. The user-level network interface 

overcomes the inefficiencies of the conventional systems discussed above. In 
Fig. 10, the switching processor 44 has certain network applications 65 
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running thereon, including the packet switching functions described above. 
The network applications 65 and the packet switching program have direct 
access to a list of buffers in the kernel memory 63. In an Ethernet network, 
each network interface 37 has a list of buffers associated with it. These 
5 buffers can be used to transmit data as well as receive data. A network driver 
59 on the operating system 48 communicates with the network interface 37 in 
the manner described previously, and also has access to the buffer list in the 
kernel memory 63. 

In particular, the descriptors identify the address of the buffer within the 
10 kernel memory 63, the length of the data stored in the buffer, and an 
20 ownership identification of the buffer (i.e., whether the buffer is presently 

"owned" or controlled by the network interface hardware or the network 
application software). The network interface 37 circles through the buffer list 
in the kernel memory 63 to access the buffers in order to send or receive data 
25 15 as necessary. Similarly, the network applications 65 on the switching 

processor 44 circle through the list of buffers to process the data. If the 
network interface 37 transmits data from a particular buffer, the network 
applications 65 reclaim the buffer and return It to a free buffer pool. 
30 Conversely, if the network interface 37 has just received data and placed the 

20 data in a particular buffer, the network applications 65 process the data. 

Figs. 11-13 illustrate the processes performed by the switching 
processor 44 to initiate the direct user access to the network interfaces, to 
send data packets to the network interfaces, and to receive data packets from 
the network interfaces. As shown in Fig. 11, the switching processor 44 is 
25 initiated in a process beginning at step 300. At step 301 , all interrupts to the 
switching processor 44 are disabled so that the switching program and any 
network application programs are run exclusively on the processor. Any 
interrupts from any device are thereafter delivered to the control processor 42. 
Next, at step 302, the kernel memory 63 that is to be shared between the 
45 30 network interfaces 37 and the network applications 65 operating on the 

switching processor 44 is allocated. All the buffers within the kernel memory 
63 are mapped to all of the network interfaces 37 so that any buffer can be 
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used to transmit or receive data through any of the network interfaces. Lastly, 
at step 303, the network interfaces' registers and buffers are mapped to the 
network applications 65. This enables the network applications 65 to directly 
control the network interfaces 37 by changing the content of the registers and 
5 to perform read/write operations from/to the buffers directly. 

Once the switching processor 44 is initiated in this manner, all data 
accesses from/to the network interfaces operate like conventional memory 
read/write operations by the network applications. High efficiency results from 
the fact that the network applications 65 and the switching program run on a 
10 single thread on a dedicated, non-interruptable processor. Also, there is no 
20 context switching since the programs running on the switching processor 44 

are isolated as a separate group that is not available to any other processes 
or threads in the multiprocessor system. 

The process of sending data from one of the network applications 65 to 
25 15 the network interface 37 is illustrated in Fig. 12, and begins with step 320. At 

step 321, the network application 65 gets the next available buffer from the 
free buffer pool. The free buffer pool may be maintained as a table within the 
kernel memory 63. The network application 65 then writes the data to be 
30 transmitted in the form of a data packet into the identified buffer at step 322, 

20 and changes the "ownership" of the buffer to the network interface 37 at step 
323. At step 324, the network application 65 indicates to the network 
interface 37 that a buffer contains data ready to be transmitted. At step 325, 
the network application 65 periodically checks to see if the data has been 
transmitted. Once the data has been transmitted, the network application 65 
25 returns the buffer to the free pool at step 326. At step 327, the network 
4Q application 65 returns to performing other tasks. 

The process of receiving data from the network interface 37 to one of 
the network applications 65 is illustrated in Fig. 13, and begins with step 340. 
At step 341, the network application 65 passes a list of available buffers from 
45 30 the free buffer pool to the network interface 37. At step 342, the network 

application 65 checks the status of the network interface 37 to see if data has 
been received. If no data has been received, step 343 causes the program to 
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loop back and repeat step 342. If data has been received by the network 
interface 37, the network application 65 identifies the buffer into which the 
data has been received by checking the ownership bit at step 344. The 

10 

network application 65 next verifies that valid data was received into the buffer 
5 at step 345, and if the data is not valid then the program returns to step 342. 
Conversely, if the received data is valid, then the network application 65 
processes the data at step 346. Thereafter, the network application 65 
returns the buffer to the free buffer pool at step 347. At step 348 t the network 
application 65 returns to performing other tasks. 
10 Having thus described a preferred embodiment of a computer data 

20 packet switching and load balancing system using a general-purpose 

symmetrical multiprocessor architecture, it should be apparent to those skilled 
in the art that certain advantages of the aforementioned system have been 
achieved. It should also be appreciated that various modifications, 

25 15 adaptations, and alternative embodiments thereof may be made within the 

scope and spirit of the present invention. The invention is further defined by 
the following claims. 
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CLAIMS 

What is Claimed is: 

10 1 . A general-purpose multiprocessor computer system comprising: 

a plurality of network interfaces each adapted to be coupled to 
5 respective external networks for receiving and sending data packets to 

and from said external networks via a particular communication 
15 protocol; 

a plurality of processors including a first processor providing a 
control processor and remaining ones of said processors each 
10 providing data packet switching processors, said data packet switching 

20 processors each being coupled to each one of said plurality of network 

interfaces; and 

a main memory coupled to each of said plurality of processors, 
said control processor receiving raw load status data from said external 

25 

15 networks and generating load distribution configuration data therefrom, 

said load distribution configuration data being stored in said main 
memory for access by said data packet switching processors, said 
switching processors routing received ones of said data packets to a 
selected one of said external networks in accordance with information 
20 included in a header portion of said data packets and said load 

distribution configuration data. 
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2. The computer system of Claim 1, wherein said switching 
processors further provide periodic polling of corresponding ones of said 

25 network interfaces for detecting a received one of said data packets therein. 

3. The computer system of Claim 1, wherein said switching 
processors further re-write said routing information included in said header 
portion of said data packets to reflect said selected one of said external 
networks. 
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4. The computer system of Claim 1, wherein said main memory 
further comprises a connection table reflecting status of previously received 
ones of said data packets. 



5. The computer system of Claim 4, wherein said switching 
5 processors access said connection table to determine correspondence 

between a received one of said data packets and said previously received 
15 ones of said data packets in determining said selected one of said external 

networks. 

6. The computer system of Claim 1 , wherein said main memory 
20 10 further comprises a configuration table containing said load distribution 

configuration data. 

7. The computer system of Claim 1, wherein said communication 
25 protocol comprises Transmission Control Protocol/Internet Protocol (TCP/IP). 

8. The computer system of Claim 1, wherein said switching 
15 processors further include an engine module having stored instructions to be 

executed by said switching processors, said stored instructions comprising 
the steps of: 

polling a first one of said network interfaces for presence of a 
received data packet, 

35 20 if a received data packet is present at said first one of said 

network interfaces, routing said received data packet to said selected 
one of said external networks, and 

if a received one of said data packets is not present at said first 
40 one of said network interfaces, polling another one of said network 

25 interfaces for presence of a received data packet. 
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9. The computer system of Claim 1, wherein said switching 
processors further include a filter module having stored instructions to be 
executed by said switching processors, said stored instructions comprising 
the steps of: 

5 reading routing information from said header portion of said data 

packet, 

accessing said load distribution configuration data stored in said 
main memory, 

selecting said selected one of said external networks based on 
10 said routing information and said load distribution configuration data, 

2 0 modifying said data packet by re-writing said routing information 

to reflect said selected one of said external networks, and 

sending said modified data packet to one of said plurality of 
network interfaces corresponding to said selected one of said external 
25 15 networks. 

10. The computer system of Claim 9, wherein said stored 
instructions of said filter module further comprises the steps of: 

30 reading transport information from said header portion of said 

data packet, and 

20 accessing connection status data stored in a connection table of 

said main memory reflecting status of previously received ones of said 
35 data packets, 

wherein, if said transport information indicates that said data 
packet corresponds to a previously received data packet, then said 
25 selecting step further comprises selecting said selected one of said 

40 external networks based on routing of said previously received data 

packet. 
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11. In a general-purpose multiprocessor computer system 
comprising a plurality of symmetrical processors, a main memory shared by 
said plurality of processors, and a plurality of network interfaces each adapted 
to be coupled to respective external networks for receiving data packets 
5 therefrom and sending data packets thereto via a particular communication 
protocol, a method for operating said computer system comprises the steps 
of: 

configuring one of said plurality of processors as a control 
processor and remaining ones of said processors as data packet 
10 switching processors, said data packet switching processors each 

20 being coupled to each one of said plurality of network interfaces; 

providing load data regarding load status of said external 
networks; 

generating load distribution configuration data from said load 
25 15 data using said control processor and storing said load distribution 

configuration data in said main memory for access by said data packet 
switching processors; and 

routing received ones of said data packets using said switching 
30 processors to a selected one of said external networks in accordance 

20 with information included in a header portion of said data packets and 

said load distribution configuration data. 
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12. The method of Claim 11, further comprising the step of 
periodically polling corresponding ones of said network interfaces by said 

25 switching processors for a received one of said data packets. 

13. The method of Claim 1 1 , further comprising the step of re-writing 
said routing information included in said header portion of said data packets 
by said switching processors to reflect said selected one of said external 
networks. 
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14. The method of Claim 11, further comprising providing a 
connection table in said main memory reflecting status of previously received 
ones of said data packets. 



15. The method of Claim 14, further comprising accessing said 
5 connection table by said switching processors to determine correspondence 

between a received one of said data packets and said previously received 
15 ones of said data packets in determining said selected one of said external 

networks. 

16. The method of Claim 11, further comprising providing a 
20 10 configuration table in said main memory containing said load distribution 

configuration data. 

1 7. The method of Claim 1 1 , further comprising the steps of: 

25 polling a first one of said network interfaces for presence of a 

received data packet, 
15 if a received data packet is present at said first one of said 

network interfaces, routing said received data packet to said selected 
30 one of said external networks, and 

if a received one of said data packets is not present at said first 
one of said network interfaces, polling another one of said network 
20 interfaces for presence of a received data packet. 

35 



40 



45 



50 



55 



WO 00/30322 PCT/US99/27048 

28 

18. The method of Claim 1 1 , further comprising the steps of: 
reading routing information from said header portion of said data 

packet, 

accessing said load distribution configuration data stored in said 
5 main memory, 

selecting said selected one of said external networks based on 
said routing information and said load distribution configuration data, 

modifying said data packet by re-writing said routing information 
to reflects said selected one of said external networks, and 
0 sending said modified data packet to one of said plurality of 

network interfaces corresponding to said selected one of said external 
networks. 

1 9. The method of Claim 1 8, further comprising the steps of: 
reading transport information from said header portion of said 

5 data packet, and 

accessing connection status data stored in a connection table of 
said main memory reflecting status of previously received ones of said 
data packets, 

wherein, if said transport information indicates that said data 
0 packet corresponds to a previously received data packet, then said 

selecting step further comprises selecting said selected one of said 
external networks based on routing of said previously received data 
packet. 

5 20. The method of Claim 1 1 , further comprising the step of providing 

an active and a back-up portion of said main memory, wherein newly 
generated load distribution configuration data is stored in said active portion 
while said back-up portion is accessible to said switching processors. 
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